$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: 4HLOrB8FeDyiikx4qUFwpoVhRkJhCoXlQ6uzW9V/suY= Subject key identifier: 7A:E6:99:E0:88:31:3D:E4:1C:97:77:07:D2:99:3F:AC:40:86:BB:F9 Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 07C7 Signing time: Sat 18 May 2024 22:02:47 +0000 Manifest this update: Sat 18 May 2024 22:02:46 +0000 Manifest next update: Sat 25 May 2024 22:02:46 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: T/uSVecNxwIxgRNgoFLots8VDRvA7VOtzIqpR9I+aL8=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: Aj4qJOrIwZtIKQXZjL9AFhqKSGbaA58q9CvEz8/gcJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: May 18 22:02:46 2024 GMT Not After : May 25 22:02:46 2024 GMT Subject: CN=66492587-b549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:14:75:90:3d:6b:57:2b:a1:42:ed:e0:87:5e: 16:99:e1:36:46:da:77:60:1c:42:6b:81:11:b5:72: f9:ab:75:21:06:7f:91:9f:ba:aa:e8:36:af:7b:43: 55:88:a1:b5:fd:71:60:69:60:43:e3:1e:9a:7c:f4: 1d:4a:da:26:e9:4b:7f:14:53:a3:eb:69:8b:3e:9f: b0:aa:1f:85:a0:53:7a:53:19:bf:69:d2:ca:0b:ab: cc:76:5f:4d:a0:f0:55:d0:06:6d:87:54:ab:58:45: d4:8f:d8:5e:78:a6:3c:90:04:92:92:a2:f1:d0:36: 45:c4:c3:6a:f7:de:aa:e3:dd:11:76:ec:e5:26:89: 7c:bd:cd:47:14:35:c5:b8:18:f7:eb:47:41:af:5b: 04:8c:59:d8:22:2e:9d:ae:26:d2:0e:7d:60:bb:b5: df:97:6e:1e:0b:5a:f9:d5:b4:a5:a3:e0:91:bb:77: 38:86:ea:d5:5f:20:b8:42:f7:9f:3b:e0:84:17:52: 9a:1d:20:7e:d1:3b:c1:f6:99:02:10:8a:8a:7c:cc: 39:03:07:c1:7e:6c:d7:1f:e0:70:39:e2:8b:a7:17: 9d:c3:d4:68:5a:05:75:01:cd:2d:2d:72:c4:ae:cb: 10:e7:41:4e:f4:cf:82:17:c7:eb:08:db:eb:81:3c: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E6:99:E0:88:31:3D:E4:1C:97:77:07:D2:99:3F:AC:40:86:BB:F9 X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:23:75:37:a4:3e:d6:2e:60:33:f6:c1:67:43:79:72:af:06: ad:ff:06:aa:9f:67:80:dc:bd:a5:c7:2a:21:6a:dd:db:9b:52: 13:47:f9:e5:4b:51:41:c0:1e:7c:06:04:7f:b5:76:f0:11:60: 65:46:f6:3a:f8:f1:40:9a:98:f6:12:13:c1:3d:99:9c:9a:60: f5:aa:35:f0:ab:4e:ff:91:cd:4b:51:42:1c:f4:3b:82:1a:93: 04:8b:2f:6b:d1:e8:75:7f:18:82:95:2b:77:f9:1d:15:ea:ea: 3a:ea:59:c0:1b:38:f6:2b:bc:a6:54:d2:f8:07:6e:91:2d:b1: c3:82:86:13:a8:7f:9c:3e:b5:ad:11:1d:b8:17:39:7f:eb:62: 46:6a:e9:f1:e9:c8:8e:9e:0e:b3:b6:2e:1c:74:56:2b:99:df: 62:28:9a:3c:e4:16:16:2b:ed:ab:40:23:3e:84:9f:b2:f7:75: f8:a2:17:69:5f:10:92:60:05:a5:6d:ed:17:31:c9:d4:87:4e: 64:e9:7a:a4:62:bb:be:1a:15:39:f1:a7:79:70:fb:c9:98:1d: a2:23:dc:ec:42:d5:ed:c3:66:66:4a:07:79:8c:07:b6:60:04: 4b:55:9f:a5:a2:5d:53:10:31:78:eb:8d:21:2d:d4:7f:95:23: 03:a8:07:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjQwNTE4MjIwMjQ2WhcNMjQwNTI1MjIwMjQ2WjAYMRYwFAYD VQQDEw02NjQ5MjU4Ny1iNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RR1kD1rVyuhQu3gh14WmeE2Rtp3YBxCa4ERtXL5q3UhBn+Rn7qq6Dave0NV iKG1/XFgaWBD4x6afPQdStom6Ut/FFOj62mLPp+wqh+FoFN6Uxm/adLKC6vMdl9N oPBV0AZth1SrWEXUj9heeKY8kASSkqLx0DZFxMNq996q490RduzlJol8vc1HFDXF uBj360dBr1sEjFnYIi6dribSDn1gu7Xfl24eC1r51bSlo+CRu3c4hurVXyC4Qvef O+CEF1KaHSB+0TvB9pkCEIqKfMw5AwfBfmzXH+BwOeKLpxedw9RoWgV1Ac0tLXLE rssQ50FO9M+CF8frCNvrgTwP0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrmmeCI MT3kHJd3B9KZP6xAhrv5MB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfI3U3pD7WLmAz9sFnQ3lyrwat/waqn2eA3L2lxyohat3bm1ITR/nl S1FBwB58BgR/tXbwEWBlRvY6+PFAmpj2EhPBPZmcmmD1qjXwq07/kc1LUUIc9DuC GpMEiy9r0eh1fxiClSt3+R0V6uo66lnAGzj2K7ymVNL4B26RLbHDgoYTqH+cPrWt ER24Fzl/62JGaunx6ciOng6zti4cdFYrmd9iKJo85BYWK+2rQCM+hJ+y93X4ohdp XxCSYAWlbe0XMcnUh05k6XqkYru+GhU58ad5cPvJmB2iI9zsQtXtw2ZmSgd5jAe2 YARLVZ+lol1TEDF4640hLdR/lSMDqAcb -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org